Start::
HKLM-x32\...\Run: [Genshin Impact_launcher__1_1] => [X]
HKLM-x32\...\Run: [Genshin Impact_launcher_mihoyo_1_0] => [X]
HKU\S-1-5-21-4162586386-681571504-197636332-1002\...\Run: [max20_iqoh] => cmd.exe /c start www.dinoklafbzor.org (Нет файла) <==== ВНИМАНИЕ
HKU\S-1-5-21-4162586386-681571504-197636332-1002\...\Run: [Firefox Browser] => C:\Firefox\X-Firefox.exe (Нет файла)
HKU\S-1-5-21-4162586386-681571504-197636332-1002\...\Run: [utweb] => "C:\Users\max20_iqoh\AppData\Roaming\uTorrent Web\utweb.exe" /MINIMIZED (Нет файла)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ограничение <==== ВНИМАНИЕ
Task: {12AF9356-B924-4BDD-90BF-EE859ADE304D} - System32\Tasks\max20_iqoh => C:\windows\system32\cmd.exe [280064 2021-01-17] (Microsoft Windows -> Microsoft Corporation) -> /c REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /f /v max20_iqoh /t REG_SZ /d "cmd.exe /c start www.dinoklafbzor.org" <==== ВНИМАНИЕ
FF HKLM\...\Firefox\Extensions: [sovetnik@metabar.ru] - C:\Program Files (x86)\YandexSovetnik\addon-3.1.16.45.xpi => не найдено
FF HKLM\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSKHKLM => не найдено
FF HKLM-x32\...\Firefox\Extensions: [sovetnik@metabar.ru] - C:\Program Files (x86)\YandexSovetnik\addon-3.1.16.45.xpi => не найдено
S2 luminati_net_updater_win_mediaget_com; "C:/Users/max20_iqoh/MediaGet2/Luminati-m/net_updater32.exe" --updater win_mediaget.com [X]
S3 WinRing0_1_2_0; \??\C:\Users\max20_iqoh\AppData\Local\Temp\tmp3CDB.tmp [X] <==== ВНИМАНИЕ
2021-02-24 11:42 C:\KVRT_Data
2021-02-24 11:42 C:\Program Files\AVG
2021-02-24 11:42 C:\Program Files\ByteFence
2021-02-24 11:42 C:\Program Files\Cezurity
2021-02-24 11:42 C:\Program Files\COMODO
2021-02-24 11:42 C:\Program Files\Enigma Software Group
2021-02-24 11:42 C:\Program Files\ESET
2021-02-24 11:42 C:\Program Files\Kaspersky Lab
2024-02-24 10:50 C:\Program Files\Malwarebytes
2021-02-24 11:42 C:\Program Files\SpyHunter
2021-02-24 11:42 C:\Program Files (x86)\AVAST Software
2021-02-24 11:42 C:\Program Files (x86)\AVG
2021-02-24 11:42 C:\Program Files (x86)\Cezurity
2021-02-24 11:42 C:\Program Files (x86)\GRIZZLY Antivirus
2021-02-24 11:42 C:\Program Files (x86)\Kaspersky Lab
2021-02-24 11:42 C:\Program Files (x86)\Microsoft JDX
2021-02-24 11:42 C:\Program Files (x86)\Panda Security
2021-02-24 11:42 C:\Program Files (x86)\SpyHunter
2021-02-24 11:42 C:\windows\speechstracing
2021-02-24 11:42 C:\ProgramData\Avira
2021-02-24 11:42 C:\ProgramData\Doctor Web
2021-02-24 11:42 C:\ProgramData\ESET
2021-02-24 11:42 C:\ProgramData\grizzly
2021-02-24 11:42 C:\ProgramData\Indus
2021-02-24 11:42 C:\ProgramData\Kaspersky Lab
2020-08-16 20:26 C:\ProgramData\Kaspersky Lab Setup Files
2021-02-24 11:42 C:\ProgramData\MB3Install
2021-02-24 11:42 C:\ProgramData\Norton
john (S-1-5-21-4162586386-681571504-197636332-1007 - Administrator - Enabled)
AlternateDataStreams: C:\ProgramData:err [1244]
AlternateDataStreams: C:\ProgramData:NT [40]
AlternateDataStreams: C:\ProgramData:NT2 [604]
AlternateDataStreams: C:\windows\System32:tdsrinu.gfc [5882]
AlternateDataStreams: C:\Users\All Users:err [1244]
AlternateDataStreams: C:\Users\All Users:NT [40]
AlternateDataStreams: C:\Users\All Users:NT2 [604]
AlternateDataStreams: C:\Users\max20_iqoh:Heroes & Generals [38]
AlternateDataStreams: C:\Users\Все пользователи:err [1244]
AlternateDataStreams: C:\Users\Все пользователи:NT [40]
AlternateDataStreams: C:\Users\Все пользователи:NT2 [604]
AlternateDataStreams: C:\ProgramData\Application Data:err [1244]
AlternateDataStreams: C:\ProgramData\Application Data:NT [40]
AlternateDataStreams: C:\ProgramData\Application Data:NT2 [604]
AlternateDataStreams: C:\ProgramData\mntemp:8EAD8B3507 [3442]
AlternateDataStreams: C:\ProgramData\PyCharmCE2022.2_222.4459.20_Uninstall.exe:9303CDB864 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini:B1DA6C571C [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk:A1B76439FE [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk:21661D084B [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini:41964AA945 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk:BE32D07BC5 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk:B96E9B8455 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Audio Switch.lnk:BD4A45E559 [3442]
AlternateDataStreams: C:\Users\max20_iqoh\Application Data:00e481b5e22dbe1f649fcddd505d3eb7 [394]
AlternateDataStreams: C:\Users\max20_iqoh\Application Data:dc2fbb8b303cabdec52ed28927f75974 [394]
AlternateDataStreams: C:\Users\max20_iqoh\Application Data:NT [40]
AlternateDataStreams: C:\Users\max20_iqoh\Application Data:NT2 [604]
AlternateDataStreams: C:\Users\max20_iqoh\ntuser.ini:NTV [13312]
AlternateDataStreams: C:\Users\max20_iqoh\AppData\Roaming:00e481b5e22dbe1f649fcddd505d3eb7 [394]
AlternateDataStreams: C:\Users\max20_iqoh\AppData\Roaming:dc2fbb8b303cabdec52ed28927f75974 [394]
AlternateDataStreams: C:\Users\max20_iqoh\AppData\Roaming:NT [40]
AlternateDataStreams: C:\Users\max20_iqoh\AppData\Roaming:NT2 [604]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [490]
IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\.DEFAULT\...\webcompanion.com -> hxxp://webcompanion.com
IE trusted site: HKU\S-1-5-21-4162586386-681571504-197636332-1002\...\hola.org -> hxxp://hola.org
IE trusted site: HKU\S-1-5-21-4162586386-681571504-197636332-1002\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-4162586386-681571504-197636332-1002\...\webcompanion.com -> hxxp://webcompanion.com
FirewallRules: [{B215F402-B691-4AEF-A3A7-C7D18CB7E259}] => (Allow) C:\Program Files (x86)\360\Total Security\360TsLiveUpd.exe => Нет файла
FirewallRules: [{8F3C2FB1-8548-44CC-AFE2-A8D0F2FBD652}] => (Allow) C:\Program Files (x86)\360\Total Security\360TsLiveUpd.exe => Нет файла
FirewallRules: [TCP Query User{BFCECE73-8B77-40B1-B8DA-0A6189701748}C:\programdata\ubar\ubar\ubar.exe] => (Allow) C:\programdata\ubar\ubar\ubar.exe => Нет файла
FirewallRules: [UDP Query User{E56B6AA2-D13E-42DD-AFFF-5F06823BA757}C:\programdata\ubar\ubar\ubar.exe] => (Allow) C:\programdata\ubar\ubar\ubar.exe => Нет файла
FirewallRules: [{2C308DAA-6101-4FCC-9FC0-871A6F774DFA}] => (Allow) C:\Users\max20_iqoh\MediaGet2\mediaget.exe => Нет файла
FirewallRules: [{A10B4B1C-3253-4DBF-868A-0018E37B32A5}] => (Allow) C:\Users\max20_iqoh\MediaGet2\mediaget.exe => Нет файла
FirewallRules: [{B95DEAB6-0C25-48B7-972A-AED03184D356}] => (Allow) C:\Program Files (x86)\360\Total Security\Utils\360AdvToolExecutor.exe => Нет файла
FirewallRules: [{2232D894-B3F7-404E-B746-216073B9B5E7}] => (Allow) C:\Program Files (x86)\360\Total Security\Utils\360AdvToolExecutor.exe => Нет файла
EmptyTemp:
Reboot:
End::